Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.60%Mar 26, 2026
- High7.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows un…Check if you run itEPSS 0.35%Mar 25, 2026
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 2.09%Mar 24, 2026
- Critical9.4Aquasecurity Trivy Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.68%Mar 23, 2026
- Medium4.6Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.Check if you run itEPSS 0.50%Mar 20, 2026
- Medium4.6Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium6.5PX4 is an open-source autopilot stack for drones and unmanned vehicles.Check if you run itEPSS 0.34%Mar 19, 2026
- High8.3Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions.Check if you run itEPSS 0.61%Mar 18, 2026
- High7.9Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions.Check if you run itEPSS 0.53%Mar 18, 2026
- Low2.1A security flaw has been discovered in CesiumGS CesiumJS up to 1.137.0.Check if you run itEPSS 0.47%Mar 12, 2026
- Critical9.3xygeni-action is the GitHub Action for Xygeni Scanner.Check if you run itEPSS 0.86%Mar 11, 2026
- High8.7Black is the uncompromising Python code formatter.Check if you run itEPSS 0.66%Mar 11, 2026
- Critical9.8Jellyfin is an open-source media system.Check if you run itEPSS 0.65%Mar 11, 2026
- High8.7liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.56%Mar 10, 2026
- Medium5.3An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with a classic personal access token (PAT) lacki…Check if you run itEPSS 0.42%Mar 10, 2026
- High7.4An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based cross-site scripting via task list content.Check if you run itEPSS 0.18%Mar 10, 2026
- High8.7An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to ac…Check if you run itEPSS 1.50%Mar 10, 2026
- Medium5.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project t…Check if you run itEPSS 0.44%Mar 10, 2026
- High8.8Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.95%Mar 10, 2026
- High8.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.22%Mar 10, 2026
- High7.5The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns.Check if you run itEPSS 0.51%Mar 6, 2026
- High7.0Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default.Check if you run itEPSS 0.49%Mar 4, 2026
- High8.6An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code i…Check if you run itEPSS 0.41%Mar 3, 2026
- Low2.1A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3.Check if you run itEPSS 0.40%Feb 27, 2026
- Critical9.1hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.67%Feb 26, 2026